Encrypted DNS & DNSSEC

That might be a good option i.e. run your own recursive DNS server (but in that case you must also implement caching of DNS results).